Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: 4g+D0fWgftvXl8FjNkLx6zDfaPsR3iRKel470HZMYP8=
Subject key identifier: F8:57:32:CA:FC:D6:64:BB:59:AF:40:25:BB:44:02:8D:66:3B:68:4E
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 0197B70E6235F2ADD67517D124FA2178A952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 0FB8
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: JLqBQf50THf2RairFxOWt1CDBrur4zxtp+TvgDZYM7w=)
2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:62:35:f2:ad:d6:75:17:d1:24:fa:21:78:a9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=f85732cafcd664bb59af4025bb44028d663b684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:0d:48:e6:54:d1:bb:41:99:13:85:42:c6:
45:64:3b:a6:af:13:ab:b5:c9:16:11:5d:4c:76:32:
ee:ee:94:1e:95:67:78:8a:55:5b:8c:81:f1:eb:95:
08:b7:c4:46:f1:db:89:00:d3:0e:ea:9f:39:f2:bb:
1f:1e:16:56:4c:77:93:41:d3:f6:1d:3c:6c:e5:b2:
9c:f6:09:59:6e:e1:61:44:e0:0c:8d:76:97:32:22:
ad:52:67:50:27:d7:d6:10:42:92:ba:37:c7:a4:be:
7e:37:e0:50:e6:5b:14:de:26:83:11:5f:81:c8:57:
99:82:c4:12:3a:3f:53:3a:76:60:1f:ef:78:46:e5:
57:5b:b8:9f:14:f4:da:f8:51:a5:0b:a5:01:fa:c7:
30:74:a6:be:f1:9a:5f:e4:a2:1f:02:4d:af:9c:3d:
78:17:7a:ee:7e:48:b1:18:50:5d:23:47:5c:7c:2d:
72:e1:ae:8e:16:3e:e9:6d:47:27:a9:83:67:fc:1a:
d6:c0:0e:3d:d0:99:3b:a2:55:d7:30:21:c3:77:f5:
97:bb:a1:fa:18:33:c3:59:77:fb:1c:6f:7e:39:c9:
09:21:d5:c8:77:df:d6:39:6f:bf:9d:48:52:68:90:
62:a4:0f:85:73:24:cd:d8:aa:c9:87:6d:6d:d9:43:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:57:32:CA:FC:D6:64:BB:59:AF:40:25:BB:44:02:8D:66:3B:68:4E
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:77:ea:de:47:22:dd:ea:62:ce:9c:3e:95:dc:94:04:ed:
af:79:6c:f3:2c:d8:ed:64:44:e2:95:a5:44:00:96:a0:03:e9:
7a:10:2f:66:d6:be:16:fd:e0:5f:d9:f1:d4:3a:cd:33:1b:d3:
41:31:b6:c6:2e:62:5b:c4:d0:6f:21:84:3b:c1:f2:d9:d8:a7:
2f:1c:04:08:19:37:ce:09:be:0b:30:5c:84:e2:c6:98:6e:d8:
b4:09:39:f6:79:26:b2:af:2b:ce:71:66:1b:98:c9:c8:d8:fd:
12:1d:c5:14:d3:f9:31:07:43:27:19:d3:ac:e8:95:a6:35:8e:
76:f4:c3:89:09:87:b6:be:1a:0d:dd:b6:cc:d1:b9:07:fc:03:
ca:b1:bf:24:d5:7a:a3:3a:9e:ec:0b:a2:70:db:cf:fa:ea:38:
de:2c:31:33:70:93:10:0b:d7:b1:06:9a:c5:6a:cf:7f:57:50:
45:c9:2c:92:1e:ac:21:20:40:ee:43:91:9e:3d:87:2c:cf:1f:
f5:f4:ae:0d:d9:04:59:47:2a:84:c3:ac:3d:b0:c3:56:d4:54:
24:20:45:8c:ff:e8:0d:b9:75:62:96:bc:8e:21:b3:ad:a2:45:
94:b1:7b:8f:17:87:28:ae:9e:9d:1a:6d:04:54:c0:de:7c:fd:
bd:78:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:42 2025 by rpki-client